CVE-2026-20938

Publication date

2026-01-13 17:56:44

Family

microsoft

State

PUBLISHED

Description

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.